Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: 9WZc6FFYYTsuZNv8zTuK12mv7H3UhBRPXXvLR2tHJjs=
Subject key identifier: BC:73:C1:AB:B4:E5:19:7C:96:ED:9D:2A:8B:E2:49:2C:A4:20:C7:C5
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 019E30A8F6CFDCF9B59187DC58C534259932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 0641
Signing time: Sat 16 May 2026 12:00:39 +0000
Manifest this update: Sat 16 May 2026 12:00:39 +0000
Manifest next update: Sun 17 May 2026 12:00:39 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: EfAiH7eD+FcgGCetfR4PZ5xfEuAZGVv0uArpSyzYP4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a8:f6:cf:dc:f9:b5:91:87:dc:58:c5:34:25:99:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: May 16 12:00:39 2026 GMT
Not After : May 17 12:00:39 2026 GMT
Subject: CN=bc73c1abb4e5197c96ed9d2a8be2492ca420c7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:f0:c5:d5:1b:0c:c5:9e:dd:60:20:6b:84:
04:76:47:a2:82:2f:59:0c:cc:7a:8b:85:a9:17:9f:
f7:1e:77:76:c8:7e:66:6e:aa:63:9a:37:ed:4e:6c:
41:3d:4e:9f:37:7b:b7:29:07:13:4f:cf:a4:62:93:
f7:24:47:51:b0:47:3e:8a:50:67:f8:26:46:00:92:
87:c7:67:8b:e5:6d:22:6b:ed:7a:58:49:05:9c:7e:
60:d3:b5:9d:27:e2:e3:5c:b9:c3:e7:2c:07:74:44:
d2:4f:4f:e1:0e:a0:f4:9c:de:ca:d6:45:3b:04:45:
32:c8:e8:1b:99:f8:1e:37:73:64:ab:35:5d:cd:48:
7d:de:95:49:b0:27:40:6a:37:09:7e:d6:1d:89:ad:
4d:36:c8:3c:b5:18:8c:c6:fc:9f:09:97:d6:a8:0d:
3e:34:07:21:5d:b0:af:af:ab:c9:56:0c:6c:6e:88:
7a:71:27:05:93:bf:ca:23:75:2e:c3:ce:0b:b3:9a:
e2:f1:19:8c:88:f2:9f:06:89:df:8d:ea:3e:03:33:
88:1e:cf:b6:30:50:b8:21:e1:cd:6f:7d:ec:37:79:
03:cf:05:ce:17:2a:c9:ea:39:bf:a8:38:37:1d:20:
4b:d0:2b:7e:b3:02:53:b2:44:38:30:b9:4c:66:d5:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:C1:AB:B4:E5:19:7C:96:ED:9D:2A:8B:E2:49:2C:A4:20:C7:C5
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:a3:90:6b:ec:95:80:a8:d2:b3:a3:a6:b7:b6:2a:ab:00:
09:66:a2:18:8b:db:c0:fc:86:83:2d:41:27:59:dc:f6:ce:51:
f7:dd:31:67:8f:fd:07:e5:68:76:88:89:79:13:88:17:cf:c5:
6a:f2:f5:af:6d:e1:1d:6b:ba:aa:4a:85:cf:5e:fc:80:38:f9:
35:e8:9d:35:a7:b1:04:73:be:1a:b7:cd:6d:72:9e:ce:8b:16:
ea:4d:15:ee:4e:fa:33:67:3d:3d:dc:87:34:8b:b1:24:6f:bd:
fd:97:45:16:e6:73:be:4f:0b:60:ce:ad:39:8d:ef:63:be:a1:
b7:d9:da:7e:87:34:1f:b5:a8:63:10:95:13:84:ec:c9:f7:c0:
34:17:d7:21:43:84:e6:80:2d:1a:fc:3c:2e:7c:9e:69:98:0b:
08:2e:4c:2a:f3:62:3d:c8:04:ea:79:10:d5:0d:2f:cb:61:46:
41:2b:8a:74:31:50:d9:1a:48:7c:b6:c8:03:e8:37:59:ca:a5:
f5:09:11:bc:0f:95:d7:ea:14:03:1c:c1:db:35:3a:2e:33:01:
7d:ca:9e:4f:2e:f8:36:0a:1b:02:10:cf:bd:32:87:1b:9e:be:
8f:07:6f:ed:ec:14:9b:92:40:66:26:24:15:fb:c9:8b:aa:f9:
d4:bb:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:23 2026 by rpki-client